Cryptography for system integrators

QNX Cryptography Library

The QNX Cryptography Library (qcrypto) is a thin shim layer which provides a unified cryptography API on the system. It also allows system integrators to select which cryptography providers to ship on the system without requiring changes to source code that uses the qcrypto API. The selection of the proper cryptography provider by components is done through a 'tag' system which is an integral part of the qcrypto library. A 'tag' is a keyword that specifies the cryptography provider that should provide the functionality required by the component interfacing with qcrypto. By default, when the tag value is NULL, the tag value is the executable name of the process.

This library also allows the end user to write custom plugins that offer cryptography services through other third-party libraries or hardware cryptography devices.

For QNX OS system components, this library provides cryptography support and allows system integrators to choose the cryptography provider for each system component.

For more information, see the QNX Cryptography Library chapter.

OpenSSL

OpenSSL cryptography support is available via the libraries libcrypto.so.3 and libssl.so.3 and the openssl utility.

For more information, including openssl commands see https://www.openssl.org/docs/man3.0/.

• blake2b160
• blake2b256
• blake2b384
• blake2s128
• blake2s160
• blake2s224
• blake3

devcrypto

The devcrypto service provides cryptography support through the "standard" /dev/crypto interface (similar to OpenBSD's cryptodev userspace API). The QNX OS /dev/crypto is a driver that exposes an interface that uses I/O control calls to perform cryptography operations (MAC, digest, cipher, AEAD cipher, etc.). The devcrypto plugin API allows you to create a software backend to devcrypto, which provides access to either software or hardware cryptographic accelerators.

For more information, see The devcrypto service.